update compose to work with modules/stack

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>

.env.example

@@ -1,28 +1,6 @@
-# Required non-SAP inputs to docker-compose.yaml.
-# Schema only: empty values deliberately fail Compose validation.
-# Puppet/Hiera owns the deployed .env. Do not replace it with this file.
-# Supplier-managed SAP/BANF settings are not included here.
-# Quote literal values containing dollar signs with single quotes in .env.
-
-# Swiss eCargo
-ecargo_api_key=
-
-# HedgeDoc (application and database use the same database credentials)
-hedgedoc_user=
-hedgedoc_password=
-bind_user=
-bind_password=
-session_secret=
-
-# IT strategy dashboard
-IT_DASHBOARD_DB_USER=
-IT_DASHBOARD_DB_PW=
-IT_DASHBOARD_DB_ROOT_PW=
-JWT_SECRET=
-ADMIN_PW_HASH=
-
-# Panda Maintenance
-PANDA_MAINTENANCE_DB_PW=
-
-# Tomcat Wiki
-TOMCATWIKI_DB_SECRET=
+# Optional nonsecret Compose setting; this is also the default when unset.
+# Puppet/Hiera owns the deployed .env. Do not replace it with this example:
+# SAP/BANF and other applications still use its existing settings.
+# Migrated application credentials live in the nine service env files listed
+# in README.md and are read with format: raw.
+WEBHOSTING_ENV_DIR=/etc/webhosting